Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
File: zQPRPdJvAESig_xqEedWoqK1aRs.mft (raw, json)
Hash identifier: Q0W0Wm0XR8NbP9lB0icEQo42WQ5/11MmmVqY2HBhm0w=
Subject key identifier: DC:6E:C7:41:B3:2C:61:83:FD:E9:42:8F:2E:08:4B:2C:DD:52:20:F8
Authority key identifier: CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
Certificate issuer: /CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Certificate serial: 01974BFB3875603A1809AA86FBDBA2250D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
Manifest number: 83
Signing time: Sat 07 Jun 2025 20:00:44 +0000
Manifest this update: Sat 07 Jun 2025 20:00:44 +0000
Manifest next update: Sun 08 Jun 2025 20:00:44 +0000
Files and hashes: 1: yLKyshLk5Y8qo2HfRt0bfJWqtcI.roa (hash: CLpNYZZ3o+zwOI76Lm9XQZQEHlIeProjGVosiuqFQCw=)
2: zQPRPdJvAESig_xqEedWoqK1aRs.crl (hash: cXRec+1DETJ9seZdmPVZtisVFT1Mel+aGYve47RbMv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:38:75:60:3a:18:09:aa:86:fb:db:a2:25:0d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Validity
Not Before: Jun 7 20:00:44 2025 GMT
Not After : Jun 8 20:00:44 2025 GMT
Subject: CN=dc6ec741b32c6183fde9428f2e084b2cdd5220f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:2a:e7:64:c4:50:64:20:52:de:29:61:a1:
02:3d:da:0d:1d:21:33:f6:0a:4e:80:9b:62:08:57:
7c:23:a2:34:95:b0:b1:34:62:84:b1:3b:d0:36:8d:
9e:9f:2a:80:da:36:57:4c:94:cb:28:bd:84:09:e5:
48:f5:49:22:42:d1:9a:4b:e5:9e:f0:75:3f:b1:6b:
1f:1a:2e:c6:0c:c5:28:88:98:5c:8b:81:20:3c:94:
d7:b5:2d:88:c1:3d:37:24:7f:09:de:47:ae:ae:b4:
83:c2:35:fc:bb:2e:db:74:89:7e:3e:63:e7:5e:23:
da:ad:9b:05:20:55:88:62:47:f6:cf:73:8b:0c:71:
1c:0e:84:13:d9:b0:e8:23:79:2b:45:71:ee:14:bf:
c2:01:84:5c:51:be:b7:0b:a4:91:30:a8:88:a1:1b:
d4:b0:6e:d7:fd:ad:3e:7e:50:22:e7:3d:cb:98:fd:
7e:00:bf:3e:f4:dc:99:98:29:ce:04:50:4f:ea:d2:
bf:d2:1c:24:d9:5b:00:c7:ce:9d:4a:c4:4b:f8:19:
8f:1b:ec:da:9d:8d:27:4c:04:df:04:c7:ef:2b:7a:
1f:94:4d:45:e3:13:46:63:6e:1f:0f:8e:27:f2:b0:
8d:d9:25:8e:61:0f:76:e2:c3:a4:bf:00:57:b4:68:
98:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:6E:C7:41:B3:2C:61:83:FD:E9:42:8F:2E:08:4B:2C:DD:52:20:F8
X509v3 Authority Key Identifier:
keyid:CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e8:a6:6d:c9:14:75:c1:f4:6d:f4:e6:2c:f2:f5:3f:9d:ca:
d7:3c:12:52:fa:9c:fb:0f:94:9d:22:f3:8e:82:51:fc:cd:66:
47:89:d5:d3:59:ca:51:66:0c:ba:f5:de:46:66:7f:49:5d:1d:
60:2b:75:8b:44:15:da:62:15:da:84:43:c1:10:cb:8e:a4:ad:
9b:7b:c1:2d:2a:f3:1c:84:87:4b:c8:5e:8b:ec:a3:38:a4:e7:
d9:db:e7:86:41:5f:c4:ba:d1:07:0f:51:ba:5b:f8:e3:b9:b1:
ab:6b:c7:c7:1d:72:9c:2b:d3:f7:29:d8:50:1a:b4:9e:74:dd:
89:a6:2f:64:a3:a8:f2:b5:2b:e2:5b:55:1d:6f:c9:d8:ba:cc:
b2:1c:c2:3a:97:53:7a:ac:35:6a:fa:d9:8f:56:54:3b:97:76:
7d:a7:ad:13:56:35:df:b0:43:53:a3:88:78:3d:85:78:d5:86:
f0:91:7f:51:bf:53:e4:00:e6:0e:c8:32:96:9a:48:a7:12:8e:
14:1b:72:5e:0d:30:d6:42:0c:dd:43:3a:d9:8e:3c:2d:7d:ad:
7c:40:e5:88:07:2c:76:c6:bc:c6:5d:d9:71:57:66:1d:b1:ae:
a8:f9:03:8a:e0:37:03:1f:60:29:26:9a:32:1a:fe:79:df:a0:
de:f2:66:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:24:27 2025 by rpki-client